An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for pacemaker ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:1072-1 Rating: important References: #1131353 #1131356 Cross-References: CVE-2018-16877 CVE-2018-16878 Affected Products: SUSE Linux Enterprise High Availability 12-SP2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for pacemaker fixes the following issues: - CVE-2018-16877: Fixed an issue with insufficient local IPC client-server authentication on the client's side (bsc#1131356). - CVE-2018-16878: Fixed a denial of service related to insufficient verification of uncontrolled processes (bsc#1131353). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise High Availability 12-SP2: zypper in -t patch SUSE-SLE-HA-12-SP2-2020-1072=1 Package List: - SUSE Linux Enterprise High Availability 12-SP2 (ppc64le s390x x86_64): libpacemaker3-1.1.15-23.9.1 libpacemaker3-debuginfo-1.1.15-23.9.1 pacemaker-1.1.15-23.9.1 pacemaker-cli-1.1.15-23.9.1 pacemaker-cli-debuginfo-1.1.15-23.9.1 pacemaker-cts-1.1.15-23.9.1 pacemaker-cts-debuginfo-1.1.15-23.9.1 pacemaker-debuginfo-1.1.15-23.9.1 pacemaker-debugsource-1.1.15-23.9.1 pacemaker-remote-1.1.15-23.9.1 pacemaker-remote-debuginfo-1.1.15-23.9.1 References: https://www.suse.com/security/cve/CVE-2018-16877.html https://www.suse.com/security/cve/CVE-2018-16878.html https://bugzilla.suse.com/1131353 https://bugzilla.suse.com/1131356 _______________________________________________ sle-security-updates mailing list
Get the latest Linux and open source security news straight to your inbox.